TrustRadius
The Data Governance Suite from New York company Varonis is an identity management option.https://dudodiprj2sv7.cloudfront.net/product-logos/t0/gU/63W5MBMNGKQS.pngVaronis - The must have tool for Data GovernanceVaronis is one of University Advancement’s core business partners in our effort to comply with the recent PCI and data security initiatives the University is undertaking. We needed to get control of our data but it became evident there was a great deal of data that was not identified due to the amount and length of data being stored. Some of the key questions answered by Varonis:The amount of stale and sensitive data.Where was this data stored?Who owned and had access to the data?What were people doing with the data?Some of the controls provided by Varonis:1. Alerts and reports on data access and file types.2. Notifications on high priority AD alerts, Exchange alerts, and behavioral analytics. Varonis has given us much needed insight into our data, which has become essential in our ability to secure our environment.,It will scan severs for Data Classifications (Credit Cards, Social Security, HIPPA, Ferpa, etc.) Detailed logging of all the writes, modified, delete, open, etc. of a file, folder, AD object, Exchange object, and sensitive data Provides alerting for AD, Exchange, and Ransomeware I can identify data owners of a particular share and email them quarterly entitlement reviews for permissions.,Speed up with website within the DatAlert site.,10,Satisfies many of our annual PCI audit requirements concerning data governance, permissions, and alerting,Asset Panda, BMC Track-It!The Onus on VaronisData Governance suite was bought in for a couple of reasons, firstly to help with the organisation classification project and secondly to control and monitor access to data across the company. In both cases this tool provided a way of viewing what data was out there along with putting some control on who was accessing what and allowing the information owners and approvers to have a realtime view of what they are agreeing to when authorizing user access.,Ability to structure unstructured data Help with data classification projects Put access controls around data Find out what is happening with your data,Implementation can be challenging in some areas and can only be executed by the vendor Implementation can only be executed by the vendor and additional work can be chargeable Licensing can be improved upon Agent based so implementation can be longer than expected,9,Initial high cost of product suite Additional modules have helped with cryptolocker type viruses Automation of manual tasks has time savings Additional work from vendor encounters additional costs,,AlienVault USM, McAfee Enterprise Security Manager, McAfee ePolicy Orchestrator
Unspecified
Data Security Platform
4 Ratings
Score 9.7 out of 101
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow'>trScore algorithm: Learn more.</a>TRScore

Data Security Platform Reviews

Data Security Platform
4 Ratings
<a href='https://www.trustradius.com/static/about-trustradius-scoring' target='_blank' rel='nofollow'>trScore algorithm: Learn more.</a>
Score 9.7 out of 101
Show Filters 
Hide Filters 
Filter 4 vetted Data Security Platform reviews and ratings
Clear all filters
Overall Rating
Reviewer's Company Size
Last Updated
By Topic
Industry
Department
Experience
Job Type
Role
Reviews (1-2 of 2)
  Vendors can't alter or remove reviews. Here's why.
Chris Gomez profile photo
December 07, 2018

Data Security Platform Review: "Varonis - The must have tool for Data Governance"

Score 10 out of 10
Vetted Review
Verified User
Review Source

Varonis is one of University Advancement’s core business partners in our effort to comply with the recent PCI and data security initiatives the University is undertaking. We needed to get control of our data but it became evident there was a great deal of data that was not identified due to the amount and length of data being stored.

Some of the key questions answered by Varonis:

  • The amount of stale and sensitive data.
  • Where was this data stored?
  • Who owned and had access to the data?
  • What were people doing with the data?

Some of the controls provided by Varonis:

1. Alerts and reports on data access and file types.

2. Notifications on high priority AD alerts, Exchange alerts, and behavioral analytics.

Varonis has given us much needed insight into our data, which has become essential in our ability to secure our environment.

  • It will scan severs for Data Classifications (Credit Cards, Social Security, HIPPA, Ferpa, etc.)
  • Detailed logging of all the writes, modified, delete, open, etc. of a file, folder, AD object, Exchange object, and sensitive data
  • Provides alerting for AD, Exchange, and Ransomeware
  • I can identify data owners of a particular share and email them quarterly entitlement reviews for permissions.
  • Speed up with website within the DatAlert site.
  1. We use Varonis on a daily basis to provide access reports to high profile data. One example is the business office report that we send to our SBO and also we use it to monitor critical Card Holder servers to match up with our Change Control documents to see which files were changes, modified, deleted, or created.
  2. We also use it to get some great informational reports like stale data reports, big data reports, exe, mp3, mov files, broken SIDs, etc.
  3. We use it for DCF (Data Classification Framework) to scan our servers for sensitive data and to stay compliant with our audits.
  4. We also use it to identify Data Owners. Varonis makes it super simple to identify these owners and then we can email them entitlement reports confirming access and they can request to change it or you can even automate it with a product like Data privilege. One important thing that most people miss is when people transfer to different departments, sometimes these people have more permissions than they need and these type of reports being sent quarterly are to help remove unneeded access.
  5. DatAlert - We use it for instant alerting (DatAlert for high priority AD alerts, exchange alerts and now Analytic alerts).
    1. The new analytics and behavior alerts are a big addition to the product. You can now see:
      1. Mass files being encrypted (Ransomware) & Behavior Patterns of Ransomware
      2. AD Permissions, OU Changes, locked accounts, etc.
      3. Detects deletion of multiple directory service objects
      4. Detects exploitation software created or modified
      5. Detects if a brute force attack is happening locking out multiple AD accounts
      6. Detects if the host file was changed
      7. Detects if system binaries are found in unusual locations
      8. Detects if Crypto tools are installed and being used
      9. Detects if Group Policy Objects have been modified and by whom
      10. This is just a few of what their product does now!
Read Chris Gomez's full review
Philip Clarke profile photo
March 17, 2017

Data Security Platform Review: "The Onus on Varonis"

Score 9 out of 10
Vetted Review
Verified User
Review Source
Data Governance suite was bought in for a couple of reasons, firstly to help with the organisation classification project and secondly to control and monitor access to data across the company. In both cases this tool provided a way of viewing what data was out there along with putting some control on who was accessing what and allowing the information owners and approvers to have a realtime view of what they are agreeing to when authorizing user access.
  • Ability to structure unstructured data
  • Help with data classification projects
  • Put access controls around data
  • Find out what is happening with your data
  • Implementation can be challenging in some areas and can only be executed by the vendor
  • Implementation can only be executed by the vendor and additional work can be chargeable
  • Licensing can be improved upon
  • Agent based so implementation can be longer than expected
Data Governance is well suited to areas where there is a requirement to control user access and privileges to unorganised data, if an organisation is taking on the challenge of a data classification project then this is a great tool for finding out what data is out in the organisation. Some additional modules allow information owners and approvers to authorise user access through a web portal cutting down on a manual process and lets profile administration be auditable.
Read Philip Clarke's full review

Data Security Platform Scorecard Summary

Feature Scorecard Summary

ID-Management Access Control (1)
10
ID Management Single-Sign On (SSO) (1)
10
Multi-Factor Authentication (1)
10
Password Management (1)
10
Account Provisioning and De-provisioning (1)
10
ID Management Workflow Automation (1)
10
ID Risk Management (1)
10

About Data Security Platform

The Data Governance Suite from New York company Varonis is an identity management option.
Categories:  Identity Management

Data Security Platform Technical Details

Operating Systems: Unspecified
Mobile Application:No